Static task
static1
Behavioral task
behavioral1
Sample
Trojan-Ransom.MSIL.Tear.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Trojan-Ransom.MSIL.Tear.exe
Resource
win10v2004-20220901-en
General
-
Target
Trojan-Ransom.MSIL.Tear.a-d44a5f262ccb43f72ee2afde3e3ff2a55bbb3db5837bfa8aac2e8d7195014d8b
-
Size
207KB
-
MD5
412f1b66437e5159fbd54cb7bb0c526e
-
SHA1
6cd761bda9dfb23f40c3d54c522c9f859c7fd308
-
SHA256
d44a5f262ccb43f72ee2afde3e3ff2a55bbb3db5837bfa8aac2e8d7195014d8b
-
SHA512
13a3d6a1d55e05cb442d3eec3502fdcb706695fd853295f596502cc36321f75cafe2ad18e6dd54b80a037f4fca93b58a1d3ee013e005866126833df952dfe9bb
-
SSDEEP
3072:9M+lmsolAIrRuw+mqv9j1MWLQuktM+lmsolAIrRuw+mqv9j1MWLQ:W+lDAA9z+lDAA
Malware Config
Signatures
Files
-
Trojan-Ransom.MSIL.Tear.a-d44a5f262ccb43f72ee2afde3e3ff2a55bbb3db5837bfa8aac2e8d7195014d8b.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ